The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/count_pdf_pages.py uses subprocess.check_output to call system utilities like pdfinfo and mdls. The implementation utilizes argument lists rather than raw shell strings, which correctly mitigates command injection vulnerabilities by preventing the shell from interpreting metacharacters in file paths.
[INDIRECT_PROMPT_INJECTION]: The skill processes external PDF files to determine page counts. Although this involves ingesting untrusted file data, the risk is minimal as the script only extracts numeric metadata and does not feed content from the PDF back into the agent's prompt context for execution or logic processing.
[EXTERNAL_DOWNLOADS]: The script attempts to import pypdf and PyPDF2. These are well-known, standard Python libraries for PDF processing and do not represent a security risk in this context.

pdf-page-count